PRIVACY

1. Responsible in terms of data protection

Responsible in terms of data protection for "Gemeinsam Digital" is:

Technical University of Dresden, CODIP

dr Kristina Barczik

Research Associate / Post-Doc | Research Associate

address Strehlener Strasse 22, 01069 Dresden

phone +49 351 - 463-42462

E-mail kristina.barczik@tu-dresden.de/ jointly.digital@tu-dresden.de

Web www.together-digital.com

Privacy is important to us. When using our website, we only process personal data to the extent necessary to provide functions or services.

The processing of personal data such as name, address, e-mail address or telephone number is always in accordance with the General Data Protection Regulation and the BDSG. Below we clarify the type, scope and purpose of the personal data we collect, use and process. Furthermore, we inform data subjects of the rights to which they are entitled by means of this data protection declaration.

Please note that Internet-based data transmissions generally have security gaps, so that absolute protection cannot be guaranteed. For this reason, every person concerned is free to transmit personal data to us in alternative ways, for example by telephone.

2. Recording when you visit our website

Every time our website is called up, we collect certain general data and store it in so-called log files on the server. This concerns, among other things, the IP address, the provider of the accessing system, the operating system used, the browser used, the website from which our website was forwarded and other similar data.

We do not use the data processed in this way to draw conclusions about a specific person, but only to optimally present or improve our website. The data is used to display the content of our website correctly, to protect our technical IT systems from attacks or, in special cases, to provide the law enforcement authorities with the information they need. If necessary, a statistical evaluation is carried out in order to increase the level of data protection and IT security in our company. The anonymously collected data, which is stored in the log files, is stored separately from all other personal data that users pass on to us.

3. Legal basis of processing

We process personal data solely within the framework of the applicable law and therefore only if one of the legal circumstances of Art. 6 Para. 1 DSGVO or the consent of the person concerned is given.

Legally effective consent to data processing by data subjects is possible under Article 6 (1) (a) GDPR if we provide sufficient information about the type of data processing and its purpose beforehand.

According to Art. 6 Para. 1 lit. b GDPR, personal data can be processed to fulfill a contract. This is the case, for example, when goods are delivered or the data is required to provide a service. Pre-contractual services are included here, such as customer inquiries about our products.

According to Art. 6 Para. 1 lit. c GDPR, processing is possible if there is another legal obligation to do so, as is the case, for example, with the storage of personal data for tax reasons.

Article 6 paragraph 1 lit. d GDPR permits the processing of personal data in order to protect the vital interests of the data subject or another natural person.

Finally, Art. 6 (1) (f) GDPR allows processing if this is necessary due to the legitimate interests of our company or a third party and provided that the interests, fundamental rights and fundamental freedoms of the person concerned do not prevail. Such an interest can be affirmed, for example, in the case of an existing customer relationship. Our interest in the processing activity is to be seen in cases where we want to conduct our business for the benefit of our company, our employees and shareholders.

The aforementioned regulations mean that the storage of personal data can be required by law, for example, or is necessary because a contract cannot be executed otherwise. Those affected can contact us in individual cases and we will clarify the reasons for which the respective personal data is kept by us or processed in another way.

4. Duration of storage

Personal data is stored in accordance with the respective statutory retention periods. As soon as such a period has expired, the data in question will be routinely deleted unless another justification allows further storage.

5. Deletion routines and blocking of

personal data

In accordance with the legal regulations, we process and store personal data of the persons concerned only for the period necessary to achieve the storage purposes or if other legal regulations permit this. As soon as the storage purpose no longer applies and there are no other justifications, the personal data will be blocked or deleted as a matter of routine and in accordance with the corresponding statutory provisions.

6. Rights of the data subject

a) Right to confirmation, Art. 15 Para. 1 S. 1, 1st Hs. GDPR

Persons affected by data processing have the right to request confirmation from us as to whether their personal data is being processed. If a data subject wants this You can contact an employee or our management at any time.

b) Right to information, 15 Para. 1 S. 1, 2nd Hs. GDPR

Every person affected by the processing of personal data has the right to receive free information about the personal data stored about him and a copy of this information from the person responsible for processing at any time. Furthermore, the European legislator for directives and regulations has granted the data subject access to the following information:

the purposes of data processing
the categories of personal data being processed
the recipients or categories of recipients who have received or will receive the personal data, in particular recipients in third countries or international organizations

if possible, the planned duration for which the personal data will be stored or, if this is not possible, the criteria used to determine that duration
the existence of a right to correction or deletion of the personal data concerning you or to restriction of processing by the person responsible or a right to object to this processing
the existence of a right of appeal to a supervisory authority
if the personal data is not collected from the data subject: all available information about the origin of the data
the existence of automated decision-making including profiling in accordance with Article 22 Para.1 and 4DSGVO and - at least in these cases - meaningful information about the logic involved and the scope and intended effects of such processing for the data subject

In addition, the data subject has a right to information as to whether personal data has been transmitted to a third country or to an international organization. If this is the case, the person concerned has the right to receive information about the appropriate guarantees in connection with the transmission.

If a data subject wishes to exercise this right to information, they can contact an employee or the management at any time.

c) Right to rectification, 16 GDPR

Affected persons have the right to request immediate correction of incorrect personal data concerning them. You also have the right to request the completion of incomplete personal data, taking into account the processing purposes.

If a data subject wishes to exercise this right to rectification, they can contact an employee or our management at any time.

d) Right to erasure, 17 GDPR

Affected parties have the right to demand that we, as the person responsible for data processing, delete the personal data concerning them immediately if one of the following reasons applies and the processing is not necessary in this respect:

The personal data were collected for such purposes or otherwise processed for which they are no longer necessary.
The data subject revokes their consent on which the processing was based in accordance with Art. 6 Para. 1 Letter a GDPR or Art. 9 Para. 2 Letter a GDPR and there is no other legal basis for the processing.
The data subject objects to the processing in accordance with Art. 21 (1) GDPR and there are no overriding legitimate reasons for the processing, or the data subject objects to the processing in accordance with Art. 21 (2) GDPR.

The personal data have been unlawfully processed.
Erasure of the personal data is necessary to fulfill a legal obligation in Union or Member State law to which the controller is subject.
The personal data was collected in relation to information society services offered in accordance with Art. 8 Para. 1 GDPR.

If one of the above reasons applies and a data subject wishes to have personal data stored by us deleted, they can contact an employee or our management at any time.

If we have made the personal data public and our company, as the person responsible, is obliged to delete the personal data in accordance with Art. 17 Para. 1 GDPR, we shall take appropriate measures, including technical measures, taking into account the available technology and the implementation costs, to to inform the persons responsible for data processing who process the published personal data that the person concerned has requested the deletion of all links to this personal data or copies or replications of this personal data from these other persons responsible for data processing, insofar as the processing is not required. We will arrange what is necessary in individual cases.

e) Right to restriction of processing, 18 GDPR

Those affected have the right to demand that we restrict processing if one of the following conditions is met:

The accuracy of the personal data is contested by the data subject for a period enabling the controller to verify the accuracy of the personal data.
The processing is unlawful, the data subject refuses the deletion of the personal data and instead requests the restriction of the use of the personal data.
The person responsible no longer needs the personal data for the purposes of processing, but the data subject needs them to assert, exercise or defend legal claims.

The data subject has lodged an objection to the processing pursuant to Article 21(1) GDPR pending the verification whether the legitimate grounds of the controller override those of the data subject.

If one of the above conditions is met and a data subject wishes to request the restriction of personal data stored by us, they can contact an employee or our management at any time. We will arrange for the processing to be restricted.

f) Right to data portability, Art. 20 GDPR

Those affected have the right to receive the personal data relating to them that has been transmitted to us in a structured, common and machine-readable format. You also have the right to transmit this data to another person responsible without hindrance from the person responsible to whom the personal data was provided, provided that the processing is based on the consent in accordance with Art. 6 Para. 1 Letter a DSGVO or Art. 9 Para. 2 letter a GDPR or on a contract pursuant to Art. 6 para. 1 letter b GDPR and the processing is carried out using automated procedures, unless the processing is necessary for the performance of a task that is in the public interest or in the exercise of official authority, which has been transferred to the person responsible.

Affected parties can also arrange for the personal data to be transmitted directly from one person responsible to another person responsible, insofar as this is technically feasible and provided that this does not impair the rights and freedoms of other persons, see Article 20 (1) GDPR.

To assert the right to data portability, the data subject can contact an employee or our management at any time.

g) Right to object, Art. 21 GDPR

Every person affected by the processing of personal data has the right granted by the European directive and regulation giver, for reasons that arise from their particular situation, at any time against the processing of personal data concerning them, which is based on Art. 6 para. 1 letter e or f GDPR takes place to file an objection. This also applies to profiling based on these provisions.

We no longer process the personal data in the event of an objection, unless we can demonstrate compelling legitimate grounds for the processing that outweigh the interests, rights and freedoms of the data subject, or the processing serves to assert, exercise or defend legal claims .

If we process personal data in order to operate direct advertising, the person concerned has the right to object at any time to the processing of personal data for the purpose of such advertising. This also applies to profiling insofar as it is associated with such direct advertising. If the data subject objects to us processing for direct marketing purposes, we will no longer process the personal data for these purposes.

In addition, the data subject has the right, for reasons arising from their particular situation, to object to the processing of personal data relating to them, which we carry out for scientific or historical research purposes or for statistical purposes in accordance with Article 89 (1) GDPR object, unless such processing is necessary to fulfill a task in the public interest.

To exercise the right to object, the data subject can contact an employee or our management directly. The data subject is also free, in connection with the use of information society services, notwithstanding Directive 2002/58/EC, to exercise their right to object by automated means using technical specifications.

h) Right to lodge a complaint with a supervisory authority, Art. 77 GDPR

Affected persons within the meaning of data protection law have, without prejudice to any other legal remedy, the right to lodge a complaint with a supervisory authority, in particular in the member state of their place of residence, their place of work or the place of the alleged infringement, if the data subject believes that the processing of personal data concerning them violates the GDPR. The data protection authority with which the complaint was lodged shall inform the complainant about the status and the results of the complaint, including the possibility of a judicial remedy within the meaning of Art. 78 GDPR.

7. Right to withdraw a

data protection consent

Any consent to a data protection process that has been granted to us can be revoked at any time.

If the data subject wishes to assert their right to revoke consent, they can contact an employee or our management at any time.

8. Data protection in applications and in the application process

We collect and process the personal data of applicants. This serves solely to carry out the application process. The processing takes place in writing or in electronic form, for example when application documents are sent to us by email. If an employment contract is concluded, the transmitted data will be stored for the purpose of processing the employment relationship. Otherwise, the data will be automatically deleted two months after our rejection, provided that deletion does not conflict with any other legitimate interests of the person responsible for processing. Another legitimate interest in this sense is, for example, a burden of proof in proceedings under the General Equal Treatment Act (AGG).

9. Email and Contact Form

Due to legal regulations, our website contains information that enables quick electronic contact to our company and direct communication with us, which also includes a general address for so-called electronic mail (e-mail address). If an affected person contacts us by e-mail or via a contact form, the personal data transmitted by the affected person will be automatically saved. Such personal data transmitted on a voluntary basis by a data subject to the data controller are stored for the purpose of processing or contacting the data subject. This personal data will not be passed on to third parties.

10.Cookies

We use cookies on our website. These are text files that are filed and saved on a computer system via an Internet browser. Through the use of cookies, we can provide the users of this website with more user-friendly services that would not be possible without the cookie setting. Cookies are used on many websites. They often contain a so-called cookie ID, a unique identifier. Internet pages or servers can thus distinguish the individual browser of the user concerned from other browsers that contain other user-specific cookies.

Cookies can be used to optimize the information and offers on our website for the benefit of the user. Cookies enable us to recognize the users of our site. The purpose of recognition is to make it easier for users to use our site.

Those affected can prevent the setting of a cookie by our website at any time by means of the appropriate setting in the browser used. Almost all browsers such as Google Chrome, Firefox, Safari, Internet Explorer and mobile browsers provide this function. In addition, cookies that have already been set can be subsequently deleted from the system of the person concerned. If a user deactivates the acceptance of cookies by the browser, it may not be possible to use all the functions of our website to their full extent.

11.Google Analytics

We use the product "Google Analytics". The operating company of the Google Analytics component is Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043-1351, USA. Google Analytics is an internet analysis service. Internet analysis is the collection, collection and analysis of data about user behavior on a website. Among other things, information is recorded such as which website a person concerned came from (so-called referrer), which sub-pages of the website were accessed or how often and for how long a sub-page was viewed. An Internet analysis is mainly used to optimize a website and for the cost-benefit analysis of Internet advertising.

We use the addition "_gat._anonymizeIp" for the internet analysis. This means that the IP address of the Internet connection of the person concerned is shortened and anonymized by Google if our Internet pages are accessed from a member state of the European Union or from another state party to the Agreement on the European Economic Area.

The purpose of the Google Analytics component is to analyze visitor flows on our website. Google uses the data and information obtained, among other things, to evaluate the use of our website, to compile reports for us that show the activities on our website, and to provide other services related to the use of our website.

Google Analytics places a cookie file on the user's computer. This is the only way for Google to analyze the use of our website. Every time one of the individual pages of this website, which is operated by us, is called up, the Internet browser on the computer of the person concerned is automatically prompted by the respective Google Analytics component to transmit data to Google for the purpose of online analysis. As part of this technical process, Google gains knowledge of personal data, such as the IP address of the person concerned, which Google uses, among other things, to trace the origin of visitors and clicks and subsequently to enable commission statements. This personal data is stored by Google in the United States of America. Google may pass on this personal data collected via the technical process to third parties.

There is the possibility of data collection and processing by Google and to prevent such. For this, the program under the link https://tools.google.com/dlpage/gaoptout be downloaded and installed. It is an additional program for the browser which tells Google Analytics that no data and information about visits to websites may be transmitted to Google Analytics. Google sees the additional program for the browser as a contradiction.

Additional information can be found at www.google.de/intl/de/policies/privacy and under www.google.com/analytics/terms/de.html be retrieved. Google Analytics is available at this link www.google.com/intl/de_de/analytics explained in more detail.

12. Subscription to our newsletter

We offer a newsletter to inform our customers about new offers at regular intervals. A valid email address is required to register. In addition, server log files are collected, as described in No. 2 of this declaration.

When you register for the first time, we send a confirmation email to comply with the so-called double opt-in procedure. Only those who have access to the confirmation email can register. This ensures that the owner of the e-mail address has authorized the receipt of our newsletter.

When registering, we also save the IP address assigned by the provider, which is used by the person concerned when registering. We also save the date and time of registration. The storage takes place in order to be able to prove the legality of the newsletter dispatch.

All data that we collect when registering for the newsletter will not be passed on to third parties, but will only be used to send the e-mails. In exceptional cases, subscribers to the newsletter will be informed by e-mail if this is necessary for further subscription to the newsletter. Reasons for contacting us can be a change in the offer or other technical reasons. The subscription can be canceled at any time by the data subject. The consent to the storage of the personal data that the person concerned has provided for the newsletter dispatch can be revoked at any time. For this purpose there is a link at the end of each newsletter. You can also unsubscribe directly on our website, but you can also use other contact channels to unsubscribe.

13. Youtube

We have embedded videos from the YouTube platform on our website. YouTube is an Internet video portal operated by YouTube LLC, 901 Cherry Ave., San Bruno, CA 94066, USA, which in turn is a company of Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043-1351, USA.

Each time one of the individual pages of our website is accessed on which a YouTube video has been embedded, the user's Internet browser will automatically download the corresponding component from YouTube. In doing so, YouTube is informed about which sub-page of our website is visited. This information is collected and assigned to the respective YouTube account of the user if he is logged into YouTube at the same time.

This happens regardless of whether the embedded video is clicked or not. Every visit to our website, the time, the browser and other data is saved. Users who do not want such data transfer can prevent the transfer by logging out of their YouTube account before accessing our website.

The privacy policy published by YouTube is available at https://www.google.de/intl/de/policies/privacy available

14. Google Maps

We have integrated plugins of the Google Maps product from Google Inc., 1600 Amphitheater Parkway, Mountain View, CA 94043-1351, USA on our website. The plugin is used to display map material and enable our customers to view the addresses of our properties directly on a map.

Each time one of the individual pages of our website is accessed on which a Google Maps plugin has been embedded, the user's Internet browser will automatically download the corresponding Google Maps component. In doing so, Google gains knowledge of which subpage of our website is visited. This information is collected and assigned to the user's respective Google if they are logged in to Google at the same time.

The privacy policy published by Google Maps is available at https://www.google.com/intl/de_de/help/terms_maps.html available.

15. Automated Decision Making

We do not carry out any profiling and do not use any other form of automated decision-making.